Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
File: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft (raw, json)
Hash identifier: 0lukCuE3gr27fo/18x9QJoeFHc+AtNkpz8peexxXOdc=
Subject key identifier: 1E:14:F7:81:1A:83:BF:AB:D6:59:DD:DF:CD:E0:D8:95:17:61:18:EF
Authority key identifier: 66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
Certificate issuer: /CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Certificate serial: 01A17DAA8D8AB323801BD4DDACBE22E846FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 14:01:31 +0000
Manifest this update: Tue 27 Oct 2026 14:01:31 +0000
Manifest next update: Wed 28 Oct 2026 14:01:31 +0000
Files and hashes: 1: ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl (hash: +ebochv8wTxyIQn5BXPJm6GyTOqyIHf1yZ3ZMsxsunc=)
2: x4lZLHx409i9ASlNHPyjDZiZaGI.roa (hash: 4B5GMEiwywVOE0OWSZpjZtJiJ2JFSDQmiE9yfVRIDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:8d:8a:b3:23:80:1b:d4:dd:ac:be:22:e8:46:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d0580e1725f45de106b97f77d9cd76bc4df806
Validity
Not Before: Oct 27 14:01:31 2026 GMT
Not After : Oct 28 14:01:31 2026 GMT
Subject: CN=1e14f7811a83bfabd659dddfcde0d895176118ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:45:fa:53:7a:26:7f:85:c0:de:52:3c:6e:
91:bc:45:b3:65:fb:f9:cc:d7:b7:07:e5:e6:55:56:
9e:57:0a:b5:35:f2:98:f1:a0:87:cd:92:25:30:42:
47:ac:1e:a5:cc:b6:ea:95:3f:49:84:35:05:4f:68:
90:29:a9:14:54:1e:35:dd:58:d7:1f:0f:56:45:02:
3c:47:84:5e:fc:bf:73:57:ce:f2:92:c5:a6:42:f1:
f7:90:86:13:3b:b9:f8:ec:62:5f:3c:37:61:d2:48:
cc:46:56:9c:c1:1b:0f:62:ad:93:a4:59:22:28:85:
21:8b:24:8e:aa:e8:de:54:97:e3:eb:c0:2d:c9:e5:
61:cc:f2:6c:ac:51:99:13:cb:5a:38:db:ac:c6:0b:
2a:e2:ff:4a:48:cb:79:dc:fc:4b:32:f0:0e:e3:2e:
a1:b9:a9:f1:e2:56:db:c4:ec:bd:f3:a2:9b:dd:1c:
a9:84:02:ee:68:3f:72:e3:9e:e2:73:91:74:65:16:
c8:f3:79:a5:6c:09:4d:1c:a0:c7:4c:59:8b:c7:a4:
15:31:cb:ac:e1:d6:60:30:b4:b0:f2:64:5e:0d:28:
1a:43:1c:8a:3e:3c:30:3a:99:28:11:2f:d4:19:2e:
a5:a7:be:20:24:4f:44:e4:0b:3e:8c:0f:27:87:dc:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:14:F7:81:1A:83:BF:AB:D6:59:DD:DF:CD:E0:D8:95:17:61:18:EF
X509v3 Authority Key Identifier:
keyid:66:D0:58:0E:17:25:F4:5D:E1:06:B9:7F:77:D9:CD:76:BC:4D:F8:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e9c07-33ed-4ee4-83ec-95d95ace8281/1/ZtBYDhcl9F3hBrl_d9nNdrxN-AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ad:f5:a1:c4:08:4e:9d:8a:a2:71:1d:59:b5:cf:fe:dd:23:
43:0f:14:58:3d:b9:0b:c5:f7:d6:ea:59:5a:39:7b:ee:46:cc:
9e:6c:7b:e2:bf:59:9e:81:72:13:81:02:d5:6c:6c:2a:46:5c:
d1:2f:01:90:2d:07:8f:b0:ef:84:1f:64:32:71:5d:b4:55:69:
09:5b:cd:6f:8b:32:1c:36:41:7e:1a:8c:93:48:00:e0:7e:ba:
91:1f:2e:ff:63:35:dd:c4:5a:f7:4a:2b:9e:8d:42:0c:f3:97:
90:c5:47:4e:74:56:0b:37:00:1b:28:fd:9a:d8:1d:3a:97:06:
f6:d9:a6:99:62:e8:c2:86:d1:39:f3:c5:db:81:44:48:9d:88:
a8:ea:bc:f6:42:29:67:06:50:2c:32:d4:4d:2c:2f:d4:5f:04:
fb:2d:a3:09:c2:2e:bc:0f:c2:69:46:3d:43:8c:21:28:8a:62:
a7:bf:8e:f1:e2:e2:b2:6b:28:f2:9e:9d:e0:4b:ed:61:f6:cb:
aa:d5:5d:a8:63:11:86:55:0b:24:5f:d2:69:3e:4e:69:35:9c:
59:10:ea:25:ae:27:5f:73:1f:9e:ef:43:65:c6:cd:ac:f7:aa:
48:22:e6:1e:a1:4d:b7:e0:48:90:cb:4d:25:b3:eb:45:7b:46:
08:9a:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:33:51 2026 by rpki-client